Traffic Trace Info


DumpFile: 201007071400.dump
FileSize: 3194.56MB
Id: 201007071400
StartTime: Wed Jul 7 14:00:01 2010
EndTime: Wed Jul 7 14:15:01 2010
TotalTime: 899.75 seconds
TotalCapSize: -1581.62MB CapLen: 96 bytes
# of packets: 44575656 (30935.96MB)
AvgRate: 288.43Mbps stddev:33.19M

IP flow (unique src/dst pair) Information

# of flows: 911989 (avg. 48.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 4.3% 3.7% 1.5% 1.4% 1.4% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 481073
Top 10 bandwidth usage (bytes/total in %):
11.5% 8.9% 7.6% 6.6% 4.5% 4.4% 4.4% 3.8% 3.2% 3.1%
# of IPv6 addresses: 1329
Top 10 bandwidth usage (bytes/total in %):
6.6% 6.3% 5.8% 5.2% 5.2% 4.8% 4.6% 4.6% 4.4% 4.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6505693
 [   64-  127]:   12654683
 [  128-  255]:    2331342
 [  256-  511]:    1761519
 [  512- 1023]:    1074791
 [ 1024- 2047]:   20247628


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         44575656 (100.00%)      32438707707 (100.00%)    727.72
 ip            44545709 ( 99.93%)      32431064575 ( 99.98%)    728.04
  tcp          31128137 ( 69.83%)      25297013905 ( 77.98%)    812.67
   http(s)     14469514 ( 32.46%)      19550992703 ( 60.27%)   1351.19
   http(c)     10497632 ( 23.55%)       2119437622 (  6.53%)    201.90
   squid         209265 (  0.47%)         93149135 (  0.29%)    445.13
   smtp          269351 (  0.60%)         97409643 (  0.30%)    361.65
   nntp              19 (  0.00%)             1687 (  0.00%)     88.79
   ftp            24419 (  0.05%)          7583628 (  0.02%)    310.56
   pop3           17540 (  0.04%)          5898755 (  0.02%)    336.30
   imap            5307 (  0.01%)          3432681 (  0.01%)    646.82
   telnet           965 (  0.00%)            69502 (  0.00%)     72.02
   ssh           252020 (  0.57%)         36517221 (  0.11%)    144.90
   dns            70613 (  0.16%)          4910240 (  0.02%)     69.54
   bgp              176 (  0.00%)            78003 (  0.00%)    443.20
   napster          166 (  0.00%)            27249 (  0.00%)    164.15
   realaud          103 (  0.00%)             7577 (  0.00%)     73.56
   rtsp           42122 (  0.09%)          5613664 (  0.02%)    133.27
   icecast        57781 (  0.13%)         46894006 (  0.14%)    811.58
   hotline           30 (  0.00%)             2243 (  0.00%)     74.77
   other        5211114 ( 11.69%)       3324988346 ( 10.25%)    638.06
  udp           9469149 ( 21.24%)       4870159152 ( 15.01%)    514.32
   dns           841743 (  1.89%)        149211697 (  0.46%)    177.27
   realaud          939 (  0.00%)            58880 (  0.00%)     62.71
   halflif           92 (  0.00%)             9306 (  0.00%)    101.15
   starcra         5098 (  0.01%)          4679587 (  0.01%)    917.93
   everque          719 (  0.00%)           119739 (  0.00%)    166.54
   unreal            63 (  0.00%)             8868 (  0.00%)    140.76
   quake             30 (  0.00%)             2826 (  0.00%)     94.20
   cuseeme            6 (  0.00%)              683 (  0.00%)    113.83
   other        8617922 ( 19.33%)       4714927413 ( 14.53%)    547.11
  icmp           454782 (  1.02%)        108921200 (  0.34%)    239.50
  ipip              383 (  0.00%)            46023 (  0.00%)    120.16
  ipsec            9871 (  0.02%)          2377510 (  0.01%)    240.86
  ip6           3462840 (  7.77%)       2148556556 (  6.62%)    620.46
  other           20547 (  0.05%)          3990229 (  0.01%)    194.20
  frag             8827 (  0.02%)          9601655 (  0.03%)   1087.76
 ip6              29945 (  0.07%)          7643012 (  0.02%)    255.23
  tcp6             7096 (  0.02%)          2263099 (  0.01%)    318.93
   http(s)         1080 (  0.00%)          1243986 (  0.00%)   1151.84
   http(c)         1799 (  0.00%)           190255 (  0.00%)    105.76
   smtp             118 (  0.00%)            41988 (  0.00%)    355.83
   imap             402 (  0.00%)            48972 (  0.00%)    121.82
   ssh             1859 (  0.00%)           335522 (  0.00%)    180.49
   dns              167 (  0.00%)            46273 (  0.00%)    277.08
   bgp              336 (  0.00%)           201849 (  0.00%)    600.74
   other           1335 (  0.00%)           154254 (  0.00%)    115.55
  udp6            18214 (  0.04%)          4411813 (  0.01%)    242.22
   dns            15589 (  0.03%)          4123785 (  0.01%)    264.53
   realaud            2 (  0.00%)              336 (  0.00%)    168.00
   other           2623 (  0.01%)           287692 (  0.00%)    109.68
  icmp6            4337 (  0.01%)           698509 (  0.00%)    161.06
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            268 (  0.00%)           265511 (  0.00%)    990.71


tcpdump file: 201007071400.dump.gz (1140.87 MB)